{
 "id": "AIR-2026-0171",
 "slug": "cve-2026-77260-mcp-atlassian-accepts-unconstrained-file-path",
 "title": "CVE-2026-77260: MCP Atlassian accepts unconstrained file paths in upload handler",
 "summary": "MCP Atlassian prior to 0.22.0 fails to properly constrain file paths in Confluence and Jira upload handlers. Authorized callers can exploit this to upload sensitive host files and retrieve their contents.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "MCP Atlassian"
 ],
 "incident_date": "2026-09-22",
 "incident_date_precision": "day",
 "first_reported": "2026-09-22",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77260",
   "publisher": "NVD",
   "title": "CVE-2026-77260: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).",
   "published_at": "2026-09-22"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-77260",
  "mcp",
  "arbitrary-file-read"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}